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(57) Abstract: 

PROBLEM TO BE SOLVED: To adequately charge information use of a user of 
a multimedia network, etc. , while easily performing management and 
protecting the privacy of the user. 

SOLUTION: When the user inputs money information to a PPC input part 14 
provided for a user terminal 10 by using cash, a prepaid card, an IC 
card, etc., a decision part 11 decides whether or not provided 
information PP can be used according to the amount of money that the 
money information shows and/or the provided information PP from an 
information provider P and a signal processing part 17 processes and 
outputs the provided information PP to the user in response to a signal 
allowing the user. 
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CLAIMS 



[Claim(s)] 

[Claim 1] Accounting equipment equipped with a judgment means to output 
the enabling signal with which use of the provided information which 
judges the money information inputted from an input means by which the 
money information which shows the amount of money recorded on the record 
medium is inputted, and the above-mentioned input means, and is offered 
by the information provider is permitted. 

[Claim 2] The above-mentioned judgment means is accounting equipment 
according to claim 1 which was made to judge based on the above- 
mentioned money information and the use tariff information added to the 
above-mentioned provided information. 

[Claim 3] Accounting equipment according to claim 1 whose above- 
mentioned money information is cash. 

[Claim 4] The above-mentioned record medium is accounting equipment 
according to claim 1 which is an IC card. 

[Claim 5] The information receiving set equipped with an input means by 
which the money information which is the information receiving set 
accomplished so that the provided information offered by the information 
provider might be received, and shows the amount of money is inputted, 
and a judgment means to output the enabling signal with which the money 
information inputted from the above-mentioned input means is judged, and 
use of the above-mentioned provided information is permitted. 



[Claim 6] The above-mentioned judgment means is the information 
receiving set according to claim 5 which was made to judge based on the 
above-mentioned money information and the use tariff information added 
to the above-mentioned provided information. 

[Claim 7] The information receiving set according to claim 5 whose 
above-mentioned money information is cash. 

[Claim 8] The above-mentioned money information is an information 
receiving set according to claim 5 which is the information recorded on 
the record medium. 

[Claim 9] The information receiving set [ equipped with the means of 
communications which transmits the use information on the above- 
mentioned provided information outside ] according to claim 5. 
[Claim 10] Communication system which accomplished and was equipped with 
the accounting equipment which has a judgment means to output the 
enabling signal with which the inputted money information is judged and 
use of the above-mentioned provided information is permitted so that 
money information might be inputted as the information provider terminal 
unit which offers information, and the user-terminal equipment which 
receives and uses the provided information from the above-mentioned 
information provider terminal unit. 

[Claim 11] The above-mentioned judgment means is the communication 
system according to claim 10 which was made to judge based on the above- 
mentioned money information and the use tariff information added to the 
above-mentioned provided information. 

[Claim 12] Communication system according to claim 10 whose above- 
mentioned money information is cash. 

[Claim 13] The above-mentioned money information is communication system 
according to claim 10 which is the information recorded on the record 
medium. 

[Claim 14] Communication system according to claim 10 which prepared the 
means of communications which transmits the use information on provided 
information to the above-mentioned user-terminal equipment. 
[Claim 15] Communication system according to claim 14 which formed the 
tariff portioner terminal unit which transmits tariff distribution 
information to the above-mentioned information provider terminal unit 
according to the above-mentioned use information. 

[Claim 16] Communication system according to claim 14 which formed the 
tariff payment terminal unit which processes by the use tariff of 
provided information paying for another according to the above-mentioned 
use information. 

[Claim 17] Claim 10 which was made to perform the communication link 



between each above-mentioned equipment by cryptocommunication, 
communication system of 14-16 given in any 1 term. 



DETAILED DESCRIPTION 



[Detailed Description of the Invention] 
[0001] 

[Field of the Invention] This invention relates to the charging system 
especially to informational offer and informational it about the 
accounting equipment, the information receiving set, and communication 
system which are used in the multimedia network which transmits 
information, such as dynamic-image data, static-image data, voice data, 
computer data, and a computer program. 
[0002] 

[Description of the Prior Art] In recent years, with maintenance of the 
optical fiber network in a trunk communication network, the spread of 
cable television systems, utilization of satellite communication, the 
spread of Local Area Networks, etc. , various information is offered 
using this communication network, and the so-called information service 
industry which collects a tariff according to the contents and the 
amount of the information is increasing. In such service, it becomes 
important to perform accounting to the offered information appropriately. 
[0003] However, if actual, protection of information is imperfect and 
unjust use of a program or image (voice is included) information has 
been a problem. In order to prevent this unjust use, an anti-copying 
function is attached, or the software equipment item number which is 
equivalent to the software itself at the above-mentioned equipment item 
number is given using the hardware equipment item number given to the 
computer etc. , and there is the technique of collating two equipment 
item numbers at the time of program execution. However, the anti-copying 
function was inconvenient at the times, such as backup, and equipment 
item number collating was inconvenient about equipment item number 
management or sale, and was not so practical. 

[0004] On the other hand, the concept which aimed at protection of the 
right of the software rightful claimant (henceforth, information 
provider) a "superdistribution" was proposed by Mr. Ryoichi Mori, and 
was shown in each official report, such as JP, 60-77218, A, JP, 60-191322, A, 
JP, 64-68835, A, JP, 02-44447, A, and JP, 04-64129, A. Drawing 10 is the 



conceptual diagram of the "superdistribution" shown in JP, 04-64129, A. An 
information provider P sends the software PPi (or PPj) which he created 
to a user terminal 10. A user terminal 10 judges the use propriety of 
Software PP in the judgment section 11 according to the conditions for 
every user ID of the proper data PIDi (or PIDj) to which it was added by 
Software PP, and a user, if use is good, the use hysteresis of provided 
information will be recorded on the storage section 12, and an 
information provider P will charge the use tariff of the provided 
information (software PP) etc. based on the hysteresis. 13 is SSU 
(software service unit) containing the above each part. 
[0005] 

[Problem(s) to be Solved by the Invention] However, the 
"superdistribution" method mentioned above had the following troubles. 
(1) "superdistribution" needs to establish the storing means of user 
proper data at least, in order to judge whether you are the user 
permitted to the information provider with user proper data, such as 
user ID, therefore to realize a "superdistribution. " By such method, a 
user needs to apply for informational use to an information provider 
beforehand, needs to get his user ID etc. , and needs to register as 1 
user proper data. It is complicated to manage the user proper data with 
which the procedure of such a use application differs from many like 
user ID. 

[0006] (2) In order that "superdistribution" may prevent informational 
unjust use, or in order that an information provider may grasp the use 
situation of his provided information, it has a use software hysteresis 
storing means like the storage section 12, and an information provider 
performs the claim of a tariff etc. to a user based on the hysteresis. 
Although this use hysteresis is needed in order that information may 
carry out not acquisition but rental-treatment in a "superdistribution", 
by such method, it will be known by the information provider what kind 
of information the user used, and a user* s privacy cannot be protected. 
[0007] (3) "superdistribution" grasps the use condition of provided 
information correctly, namely, although it is a method for grasping a 
use tariff correctly, the means or method of a tariff which are related 
for paying are not contained. For this reason, after an information 
provider gets to know the use condition of provided information, other 
means need to perform a claim and collection of a tariff. 
[0008] This invention is made in view of the above actual condition, and 
it aims at offering the charging system which can solve the problem of 
above-mentioned (1) - (3). 
[0009] 



[Means for Solving the Problem] In the accounting equipment by invention 
of claim 1, the money information inputted from an input means by which 
the money information which shows the amount of money is inputted, and 
the above-mentioned input means was judged, and a judgment means to 
output the enabling signal with which use of the provided information 
offered by the information provider is permitted is established. 
[0010] An input means to by_which the money information which is the 
information receiving set accomplished so that the provided information 
offered by the information provider might be received in the information 
receiving set by invention of claim 5, and shows the amount of money is 
inputted, and a judgment means output the enabling signal with which the 
money information inputted from the above-mentioned input means is 
judged, and use of the above-mentioned provided information is permitted 
have established. 

[0011] It accomplished and the accounting equipment which has a judgment 
means output the enabling signal with which the inputted money 
information is judged and use of the above-mentioned provided 
information is permitted provides so that money information may input as 
the information provider terminal unit which offers information, and the 
user-terminal equipment which receive and use the provided information 
from the above-mentioned information offer terminal unit in the 
communication system by invention of claim 10. 
[0012] 

[Function] Since according to this invention a judgment means judges the 
use propriety of a user' s provided information based on the money 
information recorded on record media, such as cash or a prepaid card, 
and an enabling signal is output ted when use is good, a user can get 
provided information in operating a user terminal etc. using this 
enabling signal. 
[0013] 

[Embodiment of the Invention] Hereafter, the gestalt of the 1st 
operation concerning this invention is explained with reference to 
drawing 1 . In drawing 1 the user terminal as an information receiving 
set and P 10 An information provider, The provided information provided 
for counter value with PPi (or PPj) by the information provider P, The 
information proper data of a proper with which PIDi (or PIDj) was added 
to PPi, The money information recorded on cash, a card, etc. as PPC 
mentions later, the accounting section in which the input section of PPC 
and 15 contain a display in, and, as for 16, 14 contains each part 14 
and 15 of the above and the judgment section 11, the judgment section 11 
judges the use propriety of provided information PP to be, and 17 are 



the signal-processing sections. 

[0014] Next, actuation is explained. An information provider P offers 
the provided information PP including PID. In case the provided 
information PP is used, the user terminal 10 is constituted so that it 
may surely go via the accounting section 16. This accounting section 16 
has the input section 14 as a receiving window of PPC which is money 
information. If the use demand of provided information PP arises, the 
judgment section 11 will check the availability of provided information 
PP based on PID and/or PPC. less than the balance that the money 
information on PPC shows [ the use tariff shown in PID ] ****** — etc. 
— it is a check. It processes and, as for the signal-processing section 
17, use outputs so that O.K. (authorization) or no (NG) is notified to 
the signal-processing section 17, and it may become possible for a user 
to use [ of provided information PP ] it, if it is O.K. The information 
(the use tariff of provided information, balance of PPC, etc.) about PID 
and PPC at this time is displayed by the display 15. Moreover, the 
judgment result of the use propriety of the judgment section 11 can also 
be displayed by the display 15. 

[0015] The money information PPC in this invention may be actual money 
(cash), may be a prepaid card like a telephone card, and may be 
electronic information equivalent to the money stored in a floppy disk 
and an IC card, PCMCIA, etc. In this invention, the use propriety of 
provided information PP is judged using the money information PPC 
independent of a user, not using [ instead ] user ID as user proper data 
for every user. Therefore, since a user only pays the tariff to the 
information which there is no need of carrying out application procedure 
for getting user ID, and is used as it has the money information PPC 
equivalent to actual money, he is natural and easy. It becomes 
unnecessary to manage much user proper information, and the problem of 
the above (1) is solved by this. 

[0016] Moreover, since it does not have user proper data, as for a user, 
he is not known for this invention by the information provider in the 
privacy which information to have used. Although this seems not to 
protect an information provider' s P right, it is not necessary to know 
to the privacy of the user which user corner for it to have been enough 
for the information provider P if only the tariff according to the use 
frequency of its provided information was paid, and to have used the 
information on. Although it does not have a use hysteresis storing means 
which information PID the user with which user ID used, in this 
invention, it can have a notice means of use to tell using the use 
frequency storing means or the present provided information which 



information was used how many times. In drawing 1 , use frequency 
information is told to an information provider P according to the path 
shown by the dotted line. In addition, a concrete use frequency storing 
means or the notice means of use is explained in full detail with the 
gestalt of the 2-6th operations mentioned later. The problem of ply 
PASHI of the user of the above (2) is also solved by the above. 
[0017] In this invention, since PPC is information equivalent to money, 
it is equivalent to payment of a tariff to use PPC itself. The problem 
of the above (3) is also solved by this, in addition, the concrete 
method of PPC coming to hand and the concrete collecting method, and the 
method of distributing a tariff should be involved with the problem of 
the above (2) — it is shown in the gestalt of operation of **** 2-6. 
[0018] In addition, although the accounting section 16 is accounting 
equipment of this invention and this is prepared in the interior of a 
user terminal 10 in one by drawing 1 , the accounting section 16 may be 
formed in another object in a user terminal 10. In that case, it is good 
as a configuration to which reception and signal processing of provided 
information PP are permitted from an information provider P to the use 
terminal unit 10 based on the signal which the accounting section 16 
receives first the information PID added to provided information PP, and 
shows that the judgment result of the judgment section 11 based on PID 
and PPC is O.K. Moreover, such a configuration may be applied to the 
gestalt of the 2nd - the 8th operation mentioned later. 
[0019] Next, the gestalt of the 2nd operation is explained about drawing 
2 . Drawing 2 shows the case where PPC is actual money (cash). The input 
section 14 of PPC in this case is the inlet port of coin or a bill, and 
a user puts fixed money into this input section 14 first. When the money 
exceeds the tariff shown in PID, the judgment section 11 permits use of 
provided information PP. Or the accounting section 16 displays the use 
tariff of provided information on a user by the display 15, and a user 
inputs the money equivalent to it into the input section 14 of PPC. The 
judgment section 11 judges the use propriety of provided information PP 
based on it. Moreover, when a tariff is updated according to time amount, 
that is displayed and you may make it input the surcharge according to 
it. Moreover, the inputted amount of money is stored in the coin box 18, 
and a certain engine which performs recovery of an information provider 
P or a tariff collects it. At this time, the use frequency for every 
provided information PP is recorded and collected by the counter 19, and 
the tariff of the coin box 18 is distributed to each information 
provider P according to that use frequency. A counter 19 can be omitted 
when the number of provided information PP is one, and use frequency is 



unnecessary. 

[0020] Next, the gestalt of the 3rd operation is explained about drawing 
3 . Drawing 3 shows the case where PPC is a prepaid card like a 
telephone card. A user puts a prepaid card in the input section 14 of 
PPC, and from the use tariff (this amount of money may be displayed) the 
amount of money indicated by it was indicated to be to PID, the judgment 
section 11 judges many, and when many, he permits use of PP. In this 
case, even if the use tariff of PP is updated by time amount, the input 
14 of the judgment section 11 and PPC is constituted so that it may 
become available continuously, if it is in the tariff of a prepaid card. 
When it considers as the configuration whose input section 14 can add 
and insert a prepaid card, use of the further long duration also becomes 
possible. 

[0021] Acquisition of such a prepaid card is easily [ anywhere ] 
available, if it is the selling gestalt marketed by many dealers like a 
current telephone card. In this case, the manufacturing company of a 
prepaid card becomes the tariff portioner 20, and an information 
provider P receives distribution of the tariff according to the use 
frequency of provided information PP by registering with that tariff 
portioner 20. The above-mentioned dealer is included in a charge 
portioner. 

[0022] Distribution of the tariff according to this use frequency are 
realized when the accounting section 16 tells the tariff portioner 20 
about current use information using communication link I/F21. This 
notice of use is constituted so that it may be restricted and outputted 
at the time at which the accounting section 16 updates the amount of 
money of a prepaid card. When inputting provided information PP by 
communication link, this communication link I/F21 can be shared. In this 
case, as shown in drawing 4 , the tariff portioner' s 20 terminal, an 
information provider' s P terminal, and the user terminal 10 are 
connected to the network 22, and the tariff portioner 20 distributes a 
tariff to an information provider P according to the above-mentioned 
notice. 

[0023] Moreover, when it does not have communication link I/F21, there 
is also a method of changing the class of prepaid card according to the 
information to be used. At this time, the judgment section 11 performs 
processing in which the class of prepaid card is investigated according 
to information, and also judges the use propriety to it. Moreover, when 
a means to record use record of provided information PP on a prepaid 
card is formed in the accounting section 16 and the tariff portioner 20 
collects these prepaid cards, the tariff according to use frequency can 



also be distributed. In that case, what is necessary is in exchange of a 
prepaid card, to end with the tariff of only money information, and just 
to make it into the selling gestalt of the tariff of the prepaid card 
itself also being added besides the tariff of money information, when it 
is not exchange of a prepaid card in order to promote recovery of a 
prepaid card. However, the tariff corresponding to unrecoverable use 
record may be distributed by the ratio according to the use record 
currently collected. 

[0024] Drawing 5 shows the gestalt of the 4th operation and shows the 
case where PPC is a floppy disk or an electric and/or magnetic device 
with easy rewriting. Moreover, a network system is shown in drawing 6 . 
In this case, the money information stored in PPC is special data which 
can carry out addition processing only by the tariff portioner 20 who is 
data guaranteed by a bank, other financial institutions, etc., or 
includes a dealer. A user puts PPC in the input section 14. The 
accounting section 16 reads information from PPC, and when the 
accounting section 16 can ask PPC for a use tariff, the judgment section 
11 permits more (this amount of money may be displayed) use of PP than 
the tariff that amount of money was indicated to be to PID (O.K.). In 
this case, continuously, even if the use tariff of PP is updated by time 
amount, less than the written tariff of PPC is constituted so that it 
may be available. 

[0025] Since the money information in this case is electronic 
information, the communication link in a predetermined procedure with 
the tariff portioner 20 can also perform 1/0 of money information 
through communication link I/F21. Since a user does not necessarily pay 
actual money to the tariff portioner 20 directly at this time unlike the 
gestalt of the 1st and the 2nd operation, the bank and the other 
financial institutions (henceforth, tariff payment person 23) which 
contracted the contract with the user guarantee the money payment of a 
user. Furthermore, distribution of the tariff according to use frequency 
are attained also about the notice of use information by telling the 
tariff portioner 20 about the present use information using 
communication link I/F21 like the gestalt of the 3rd operation. In this 
case, it is also possible to remit a use tariff to the direct tariff 
portioner 20 or an information provider P using the electronic money 
information PPC. 

[0026] Specifically, 1/0 of electronic money information is realizable 
with the following communications processing. Moreover, the accounting 
section 16 shall have the code and an authentication processing means 
like the after-mentioned, and shall have a means to manage safely the 



time stump shown by TA mentioned later. Since PPC is a medium with easy 
rewriting of a floppy disk etc. and injustice may be performed by the 
copy of PPC etc. , in order to prevent it, authentication of PPC of this 
is enabled, and it opposes injustice, such as a copy of PPC, by 
management of a time stump. 

[0027] Next, a user is set to A, C and a tariff payment person are set 
[ an information provider ] to D for B and a tariff portioner, each 
holds secretly the private key which can sign, and a communications 
partner explains accounting as what knows the public key which can 
inspect the signature (for example, the private key of A is set to sA 
and a public key is set to pA). Here, the case where A uses the provided 
information Pi of B is considered. However, a processing result with the 
key Y of X shall be expressed with {X} ~Y, and each processing of a user 
and management of a key or a type stamp shall be based on storage and 
record of the means or everybody to whom the safety in the accounting 
section 16 was guaranteed. 

[0028] [Money information acquisition processing] 

(1) A gives its registration information iA(s) (the account number, 

credit number, etc.), signs with a private key sA, and sends the input 

request of the money information worth a yen (the unit of currency is 

not restricted to a circle) to C. 

MA= {A, {A, iA,a,TAFsA} 

[0029] (2) If the signature of MA is inspected with the public key pA of 
A, D is asked for a cyclotomy using iA and it is accepted, C will sign 
every yen and every base unit c (if information is the price of a 100 
yen unit, it is every 100 yen) in the money information a by sC which is 
the signature key of C, and will send the following message to A. 
However, a different time stump TCi is attached to them. 
MC=sigma {TA, {C, e, TCi} ~sC} ~pA [0030] (3) A decodes each of MC by pA, 
inspects a signature with the public key pC of C corresponding to sC 
further, and if an inspection result is right, it will record {C, a, 
TCiFsC on PPC. In addition, TA and TCi show a time stump and the 
message with the same time stump from the same transmitting person is 
taken as an unjust demand. Moreover, if [ are / like / or TA and TCi do 
not have being a serial number or that it is in agreement by chance / a 
small random number ], they may not be a time stump. 
[0031] [Notice processing of use information] 

(1) When A wants to use Information Pi, if larger than the use tariff 
the money information in PPC of A was indicated to be to PIDi, the 
accounting section 16 will permit use of Pi. 

(2) When A ends use of Pi, the accounting section 16 eliminates during 



use the use tariff required from the money information on PPC. 

[0032] (3) At this time, A sends the next notice MB of use to C. However, 

the eliminated use tariff is set to b. 

MB= {A, B, {B, b.TBKsA} 

(4) C inspects this message and pays b yen as a dividend to B at the 
time of the right. 

[0033] In the above-mentioned explanation, in order to simplify 
processing, the cipher system between C and each user was made into 
public key encryption, but if the key is shared beforehand, it is clear 
that a common key encryptosystem may be used. Moreover, the shelf-life 
of each message can also be set by the time amount from a time stump. 
The order of a list in a message may be above in random order, and a 
user's identifier or time stump which are shown by A, B, etc. may not 
necessarily be required for it. Furthermore, the procedure of the above- 
mentioned money information acquisition processing and the notice 
processing of use information is one example, and all the things that 
perform accounting, without using user proper data by making electronic 
information into money information are contained in this invention. 
[0034] Moreover, when it does not have communication link I/F21, a user 
has the money information of the tariff portioners 20, such as a dealer, 
stored in PPC by the way inputted in exchange for a tariff. Moreover, in 
case [ of the tariff portioners 20, such as a dealer, ] money 
information is filled up and inputted by the way, when the accounting 
section 16 records use record of said provided information PP like MB on 
PPC, and a supplement machine collects use records for PPC, the tariff 
according to use frequency can be distributed. Since such electronic 
money information is special data which only the tariff portioner 20 can 
process as mentioned above, in order for the user without communication 
link I/F21 to use PPC, use records can surely be collected through the 
tariff portioners 20, such as a dealer, and distribution of the tariff 
according to use frequency are possible. 

[0035] Drawing 7 shows the gestalt of the 5th operation and shows the 
case where PPC is an IC card and an electronic card like PCMCIA. The 
configuration of a network system is the same as that of drawing 6 . In 
this case, the money information stored in PPC is special data which can 
carry out addition processing only by the tariff portioner 20 who is 
data guaranteed by a bank, other financial institutions, etc., or 
includes a dealer. A user puts PPC in the input section 14 of PPC, and 
enables actuation of PPC in predetermined procedure (inspection of a 
personal identification number etc.). The accounting section 16 reads 
money information from PPC, and when the accounting section 16 can ask 



PPC for a use tariff, the judgment section 11 permits more (the amount 
of money may be displayed) use of PP than the tariff the frame was 
indicated to be to PID. In this case, continuously, even if the use 
tariff of PP is updated by time amount, less than the written tariff of 
PPC is constituted so that it may be available. 
[0036] Since the money information in this case is electronic 
information, the communication link in a predetermined procedure with 
the tariff portioner 20 can also perform I/O of money information 
through communication link I/F21. Since a user does not necessarily pay 
actual money to the tariff portioner 20 directly at this time unlike the 
gestalt of the 1st and the 2nd operation, the bank and the other 
financial institutions 23 which contracted the contract with the user, 
i.e., a tariff payment person, guarantee the money payment of a user. 
Furthermore, distribution of the tariff according to use frequency are 
attained also about the notice of use information by telling the tariff 
portioner 20 about the present use information using communication link 
I/F21 like the gestalt of the 3rd operation. In this case, it is also 
possible to remit a use tariff to the direct tariff portioner 20 or an 
information provider P using electronic money information. 
[0037] Specifically, 1/0 of electronic money information is realizable 
with the following communications processing. However, the electronic 
card used as PPC in consideration of the safety about a communication 
link or processing shall perform the owner check by the personal 
identification number, the access control to the data memory by the 
access condition, and the code and authentication by cipher system like 
the after-mentioned as a security function. At this time, the private 
key used for cipher processing or authentication processing shall be 
written in the memory area by which the access control was carried out 
as mentioned above, and only those who fulfill that access condition 
shall access (a card publisher, tariff portioner, etc.). Moreover, it 
shall be the specification which cannot change the following accounting 
actuation except publisher [ of a card ], or tariff portioner 20, either. 
[0038] The user terminal 10, an information provider' s P terminal, the 
tariff portioner' s 20 terminal, and the tariff payment person' s 23 
terminal are connected like drawing 6 in the network 22. Set a user to A 
and C and a tariff payment person are set [ an information provider ] to 
D for B and a tariff portioner here. C shall share the private key for 
cryptocommunication to each user (for example, the private key between 
sA, B, and C is set to sB for the private key between A and C), C shall 
hold secretly the private key sC for the signature which he knows, and 
the check key pC of the signature corresponding to it shall be exhibited. 



The case where A uses the provided information Pi of B for below is 
considered. However, a cipher with the key Y of Plaintext X shall be 
expressed with {X}~Y, and the whole of each processing of a user shall 
be performed within PPC with the above security functions. 
[0039] [Money information acquisition processing] 
(1) A gives its registration information iA(s) (the account number, 
credit number, etc. ) to C, and sends the input request of the money 
information worth a yen (the unit of currency is not restricted to a 
circle) to it at C. [ to D ] 
MA= {A, {A, iA, a, TA} ~sA} 

[0040] (2) If it decodes by sA which is sharing a part for the 
cryptopart of MA with A, D is asked for a cyclotomy using iA and it is 
accepted, C will sign the money information a by sC which is the 
signature key of C, and will send the following message to A. 
MC={TA, {C, a, TCKsC} ~sA[0041] (3) A decodes MC by sA, inspect a 
signature with the public key pC of C corresponding to sC further, and, 
as for PPC of A, only in a right case, an inspection result adds the 
money information on a cyclotomy. Above TA and TC is time stumps and the 
message with the same time stump from the same transmitting person 
considers it as an unjust demand. Moreover, if [ are / like / or TA and 
TC do not have being a serial number or that it is in agreement by 
chance / a small random number ], they may not be a time stump. 
[0042] [Notice processing of use information] 

(1) When A wants to use Information Pi, if larger than the use tariff 
the money information in PPC of A was indicated to be to PIDi, the 
accounting section 16 will permit use of Pi. 

(2) When A ends use of Pi, during use, the accounting section 16 deducts 
the use tariff required from the money information on PPC, and writes in 
the result at PPC. 

[0043] (3) At this time, A sends the next notice of use to C. However, 
the deducted use tariff is set to b. 
MB= {A, {B,b,TB}^sA} 

(4) C decodes this message and pays b yen as a dividend to B at the time 
of the right. 

[0044] Next, what is necessary is just to perform the next processing 
between the above-mentioned money information acquisition processing and 
the notice processing of use information, when also exchanging the 
information between A and B by cryptocommunication. However, C 
presupposes that the private key is shared also with an information 
provider. 

[0045] [Information use processing] 



(1) A sends the following message to C, in order to request generation 
of a conversation key with B from C. 

MA'= {A, B, TA'} 

(2) C generates the conversation key CK and sends the following message 
to A. 

TC\ and {A, CKKsB, TA\ and MC' = {B, CK}^sA[0046 — ] (3) A decodes MC' 
by sA and sends TC' , and {A, CKKsB to B. 

(4) B sends to A the information which decoded the received message by 
sB and was enciphered with the conversation key CK. 

(5) A decodes encryption information with the conversation key CK. 
[0047] Although the cipher system between C and each user was made into 
the common key encryptosystem in the above-mentioned explanation in 
order to simplify processing, it is clear that public key encryption may 
be used like the gestalt of the 5th operation. Moreover, the shelf-life 
of each message can also be set by the time amount from a time stump. 
Moreover, the order of a list in a message may be in random order, and a 
user's identifier or time stump which are shown by A, B, etc. may not 
necessarily be required. Furthermore, the procedure of the above- 
mentioned money information acquisition processing and the notice 
processing of use information is one example, and all the things that 
perform accounting, without using user proper data by making electronic 
information into money information are contained in this invention. 
[0048] Moreover, when it does not have communication link I/F21, a user 
has the money information of the tariff portioners 20, such as a dealer, 
stored in PPC by the way inputted. Moreover, in case [ of the tariff 
portioners 20, such as a dealer, ] money information is filled up and 
inputted by the way, when the accounting section 16 records use record 
of provided information PP on PPC, and a supplement machine collects use 
records for this PPC, the tariff according to use frequency can be 
distributed. Since such electronic money information is special data 
which only the tariff portioner 20 can process as mentioned above, in 
order for the user without communication link I/F21 to use PPC, use 
records can surely be collected through the tariff portioners 20, such 
as a dealer, and distribution of the tariff according to use frequency 
are possible. 

[0049] Drawing 8 does not show the gestalt of the 6th operation and 
shows the charging system which the tariff portioner 20 does not need 
like the gestalt of the 5th operation, using electronic information as 
money information. The user terminal 10, an information provider' s P 
terminal, and the tariff payment person's 23 terminal are connected like 
drawing 9 in the network 22. Furthermore, the electronic card used as 



PPC shall perform the owner check by the personal identification number, 
the access control to the data memory by the access condition, and the 
code and authentication by the cipher system as a security function. At 
this time, the secret key used for cipher processing or authentication 
processing presupposes that it is written in the memory area by which 
the access control was carried out as mentioned above. Moreover, suppose 
that it is also the following accounting actuation the specification 
which cannot be changed except the publisher of a card. 
[0050] The user should be set to A, B and a tariff payment person should 
be set to D for the information provider, each should hold secretly the 
private key which can sign, and the communications partner shall know 
the public key which can inspect the signature (for example, the private 
key of A is set to sA and a public key is set to pA). Here, the case 
where A uses the provided information Pi of B is considered. However, a 
processing result with the key Y of X shall be expressed with {X}"Y, and 
the whole of each processing of a user shall be performed within PPC 
with the above security functions. 
[0051] [Money information acquisition processing] 
(1) A gives its registration information iA(s) (the account number, 
credit number, etc.), signs with a private key sA, and sends the input 
request of the money information worth a yen (the unit of currency is 
not restricted to a circle) to D. 
MA= {A, {A, iA, a, TA} ~sA} 

[0052] (2) D inspects the signature of MA with A and a public key pA, iA 
is right, and if a yen payment [ A ] is possible, it will sign the money 
information a by D, and will send the following message to A. 
MD= {TA, {D, a, TD} ~sD} ~sA[0053] (3) A inspects MD by pA, inspect a 
signature with the public key pD of D corresponding to sD further, and, 
as for PPC of A, only in a right case, an inspection result adds the 
money information on a cyclotomy. The above, TA, and TD are time stumps 
and the message with the same time stump from the same transmitting 
person is taken as an unjust demand. Moreover, TA and TD may not have 
being a serial number or that it is in agreement by chance, or you may 
not be a time stump if [ like a small random number ]. 
[0054] [Notice processing of use information] 

(1) When A wants to use Information Pi, if larger than the use tariff 
the money information in PPC of A was indicated to be to PIDi, an 
accounting means will permit use of Pi. 

(2) When A ends use of Pi, during use, the accounting section 16 deducts 
the use tariff required from the money information on PPC, and writes in 
the result at PPC. 



[0055] (3) At this time, A sends the next notice MB of use to B. However, 
the deducted use tariff is set to b. 
MB= {A, B, {B,b,TB}^sA} 

(4) B inspects a signature, at the time of the right, shows signature {B, 
b, TB}"sA of A to D, and receives the tariff of b. 
[0056] Next, when also exchanging the information between A and B by 
cryptocommunication, a direct partner's public key can also perform 
cryptocommunication by the public key, but when there is much amount of 
information, cryptocommunication by the common key encryptosystem can 
also be performed as follows. In this case, suppose that the common key 
encryptosystem means is shared between each user and an information 
provider. However, in following (1) and (2), A and B may be reverse. 
[0057] [Information use processing] 

(1) A enciphers and sends the common key CK with B with the public key 
pB of B. 

MA' ={A, B, CK, TA* }~pB(2) B decodes a received message by sB. 

(3) B sends the information common-key-encryptosystenrized with the 
common key CK to A. 

(4) A decodes common key encryptosystem-ized information with the common 
key CK. 

[0058] Although the cipher system of D, each user, and an information 
provider P was made into public key encryption in the above-mentioned 
explanation in order to simplify explanation, it is clear that the above 
common key encryptosystems may be used. Moreover, the shelf-life of each 
message can also be set by the time amount from a time stump. Moreover, 
the order of a list in a message may be in random order, and a user' s 
identifier or time stump which are shown by A, B, etc. may not 
necessarily be required. Furthermore, the procedure of the above- 
mentioned money information acquisition processing and the notice 
processing of use information is one example, and all the things that 
perform accounting, without using user proper data by making electronic 
information into money information are contained in this invention. 
[0059] Next, the gestalt of other operations is explained. 
With the charging system using the actual money shown in the gestalt of 
operation of the gestalt 2nd of the 7th operation, an information 
provider P or the tariff portioner 20 runs the facility in which one or 
more user terminals 10 were installed, and when many people pay money 
like a public telephone, a game center, a teahouse, and a library, the 
accounting system of using a user terminal 10 freely can be realized. 
[0060] Moreover, with the charging system using the prepaid card shown 
in the gestalt of the 3rd operation, an information provider P 



distributes provided information PP widely by CD-ROM, personal computer 
communications, etc. , it becomes the tariff portioner 20 an engine 
[ like a copyright association ] as opposed to [ whose ] information is, 
a prepaid card is manufactured and sold, and a user purchases a prepaid 
card through a dealer etc. and can realize the accounting system of 
using provided information PP at a house, other terminals, etc. 
[0061] with the charging system using the floppy disk show in the 
gestalt of the 4th operation , do not need the special input section 14 
for PPC in the gestalt of the 3rd operation ( the input section 14 of a 
floppy disk usually presuppose at a user terminal that it attach ) , but 
make a dealer omissible by the exchange by communication link of money 
information , and a realizable accounting system consist of current 
networks easily by performing a code and authentication processing in 
software further . 

[0062] The accounting system which made insurance more the accounting 
system using the gestalt of implementation of the above 4th with the 
charging system using electronic cards, such as an IC card shown in the 
gestalt of the 5th operation and PCMCIA, is realizable. The accounting 
system to which the tariff portioner 20 is not needed, i.e., a user and 
an information provider P do a direct deal through the tariff payment 
person 23 with the charging system shown in the gestalt of the 6th 
operation is realizable. Moreover, it is clear for the existing special 
data which are expected that this charging system and an accounting 
system will be put in practical use in the future to be applied also to 
the electronic cash treated like money. Furthermore, the above-mentioned 
charging system and the various accounting systems which combined the 
accounting system are also contained in this invention. 
[0063] The gestalt current of the 8th operation and an information 
provider encipher much information with a different key, and dedicate to 
CD-ROM etc. , the CD-ROM as a medium itself is cheaply sold through a 
dealer, and when an information provider informs a user of the 
cryptographic key of assignment information according to the request 
from a user, the charging system which charges the use countervalue of 
the information is known. However, by this method, the profits to the 
dealer which sells CD-ROM having sold provided information, even if the 
selling profits as a medium were obtained have the problem referred to 
as not being obtained. 

[0064] Then, the above-mentioned problem is solvable by using the 
charging system by PPC shown by this invention not to use of rental- 
information but to informational acquisition. That is, when PPC, such as 
a prepaid card, also purchases a user to the CD-ROM purchase and 



coincidence in a dealer, and a cryptographic key is got to know to them 
by the communication links (telephone etc. ) with an information provider 
and he specifies payment by the prepaid card as them, an information 
provider collects use tariffs from the dealer which sold the prepaid 
card. Since it goes via a dealer also to the flow of an informational 
use tariff by this, the profits to information use can also obtain a 
dealer. In that case, the accounting section 16 inspects the money 
information on PPC, and if informational use is possible, only when 
decoding the encryption to information, it constitutes it so that a 
tariff may be subtracted from PPC. Furthermore, this PPC presupposes 
that it can convert into money, when not using it. At this time, PPC is 
manufactured for every information provider and sold like CD-ROM through 
a dealer. Therefore, the tariff portioner 20 does not need with the 
gestalt of this operation. 

[0065] Moreover, in the gestalt of the 3rd operation, the notice 
processing of use information of a prepaid card can also make notice 
processing of use information insurance by things making it be the 
following. However, the identification number iP for every prepaid card 
and the private key sP corresponding to it shall be registered into the 
prepaid card. 

[0066] [Notice processing of use information] 

(1) If larger than the use tariff the money information in PPC of A was 
indicated to be to PIDi, CHECK will permit use of Information Pi. 

(2) When A ends use of Pi, during use, CHECK deducts the use tariff 
required from the money information on PPC, and writes in the result at 
PPC. 

[0067] (3) At this time, CHECK sends the next notice of use to C. 
However, the use tariff to B is set to b. 
MB={iP, {B,b, iP,TB}^sP} 

(4) Decode C with the private key sP which registered MB, and this 
message pays b yen to B as a dividend at the time of the right. The 
notice of use is ungenerable with this except what gets to know iP and 
sP. 

[0068] Next, a common key encryption system and a public key 
cryptosystem are explained. 

A [common key encryption system] common key encryption system is a 
cipher system (called a private key cryptosystem, a symmetry cipher 
system, and a conventional encryption system) which shares the same 
cryptographic key between a transmitting person and an addressee 
secretly. A common key encryption system can be divided into the stream 
cipher which changes the key for every block cipher enciphered with the 



same key to every [ of suitable die length ] character string (block), 
character string, or bit. There are a transposition cipher which 
replaces the sequence of an alphabetic character and is enciphered, a 
substitution type code which transposes an alphabetic character to other 
alphabetic characters in a block cipher. In this case, the conversion 
table of transposition or substitution serves as a cryptographic key. 
[0069] the BIJINERU code which uses many tables for stream cipher, the 
Barnum code using the key of throwing away only for 1 time, etc. are 
known (the detail of each code — Chapter 2 and refer to Chapter 4). 
[ of Ikeno, the Oyama work "present age code theory" Institute of 
Electronics, Information and Communication Engineers, and 1986. ] 
moreover, a code (a detail — referring to [ of Tsujii Kasahara work 
"code and information security" Shokodo, and 1990. ] Chapter 2) called 
DES (Data Encryption Standard) and FELA (Fast data Encipherment 
ALgorithm) by which the algorithm is exhibited also in the block cipher 
is widely used as a commercial code. 

[0070] However, since DES and FELA exhibit the algorithm, the decrypting 
method is also developed. Various deformation may be performed in order 
to oppose the decoding method. (For example) The below-mentioned count 
of a repeat Increase **** (C. ) [ H.Mayer and ] S. M. Matyas : "CRYPT0GRAPHY- 
A New Dimension in Computer Data Security", Wiley-Interscicnce, Appendix 
D, pp. 679-712, 1982 reference, Deformation of changing a key frequently 
(referring to Yamamoto, Iwamura, Matsumoto, and Imai: "a square mold 
pseudo-random number generation machine and the practical cipher system 
using a block cipher", Shingaku Giho, ISEC 93-29, pp. 65-75, and 1993. ) 
is proposed. 

[0071] A [pub lic-key-cryptosys tern] public key cryptosystem is a cipher 
system which a cryptographic key differs from a decode key and holds 
public presentation and a decode key for a cryptographic key secretly, 
(a) describes public key encryption below and the description and (b) 
describe RSA cryptograph, respectively as a protocol and a method 
concrete [ in (c) ] at the example of representation, and (d). 
[0072] (a) Since the description (1) cryptographic key and decode key of 
public key encryption differ from each other and a cryptographic key can 
be exhibited, it is not necessary to deliver a cryptographic key 
secretly, and key delivery is easy. 

(2) Since each user 1 s cryptographic key is exhibited, the user should 
memorize only each one of decode keys in secret. 

(3) An authentication function for an addressee to check that the 
transmitting person of the sent correspondence not being imitation and 
its correspondence are not altered is realizable. 



[0073] (b) If encryption actuation using the open cryptographic key Kp 
is set to E (kp, M) and decode actuation using the secret decode key ks 
is set to D (ks, M) to the protocol correspondence M of public key 
encryption, a public-key-encryption algorithm will fulfill the following 
two conditions first. 

[0074] (1) When kp is given, count of E (kp, M) is easy. When ks is 
given, count of D (ks, M) is easy. 

(2) If ks is not known, it will be the computational procedure of kp and 
E. Even if it knows C=E (kp, M), it is difficult to determine M in 
respect of computational complexity. 

Next, in addition to the above (1) and (2), secret communication is 
realizable when the following conditions of (3) are satisfied. 
[0075] (3) To all the correspondence (plaintext) M, E (kp, M) can be 
defined and D(ks, E (kp, M)) =M is materialized. That is, although 
everyone can calculate E (kp, M) since kp is exhibited, D (ks, E (kp, 
M)) can be calculated and only he with a private key ks can get M. On 
the other hand, in addition to the above (1) and (2), when the following 
conditions of (4) are satisfied, an authentication communication link is 
realizable. 

[0076] (4) To all the correspondence (plaintext) M, D (ks, M) can be 
defined and E(kp, D (ks, M)) =M is materialized. That is, only he with a 
private key ks can calculate D (ks, M), and even if other men turn into 
him who calculates D (ks' , M) using fake private key ks' , and has ks and 
clear up, since it is E(kp, D (ks' , M)) !=M, an addressee can check that 
the received information is unjust. Moreover, even if D (ks, M) is 
altered, it is set to E(kp, D(ks, M) 9 ) !=M, and an addressee can check 
that the received information is unjust. 

[0077] In public key encryption, the processing E which uses a public 
key is enciphered and the processing D using a private key is called 
decode. Therefore, although a transmitting person enciphers and an 
addressee decodes after that in secret communication, in an 
authentication communication link, a transmitting person will decode and 
an addressee will encipher after that. 

[0078] A protocol in case public key encryption performs secret 
communication, authentication communication link, and secret 
communication with a signature to below from the transmitting person A 
to Addressee B is shown. The private key of A is set to ksA, a public 
key is set to kpA, the private key of B is set to ksB and a public key 
is set to kpB. 

[0079] [Secret communication] When carrying out secret communication of 
the correspondence (plaintext) M from A to B, the following procedure 



performs. 

Stepl: A enciphers M with the public key kpB of B, and sends Cipher C to 
B. 

OE(kpB, M) 

Step2: B decodes C with its own private key ksB, and obtains the 
plaintext M of a basis. 
H=D (ksB, C) 

Since Addressee's B public key is opened to many and unspecified persons, 
the secret communication not only of A but all the men can be carried 
out to B. 

[0080] [Authentication communication link] When carrying out the 
authentication communication link of the correspondence (plaintext) M 
from A to B, the following procedure performs. 

Stepl: A generates the transmitting sentence S with its own private key 
ksA, and sends it to B. 
S=D(ksA, M) 

This transmitting sentence S is called signature sentence, and actuation 
of obtaining a signature sentence is called signature. Step2* B carries 
out restoration conversion of the S with the public key kpA of A, and 
obtains the plaintext M of a basis. 
M=E (kpA, S) 

Supposing M checks that it is a meaningful sentence, it will attest that 
surely M has been sent from A. Since the transmitting person's A public 
key is opened to many and unspecified persons, not only B but all men 
can attest the signature sentence of A. Such authentication is also 
called digital signature. 

[0081] [Secret communication with a signature] When carrying out secret 
communication with a signature of the correspondence (plaintext) M from 
A to B, the following procedure performs. 

Stepl: A signs M with its own private key ksA, and makes the signature 
sentence S. 
S=D(kpA, M) 

Furthermore, A enciphers S with the public key kpB of B, and sends 
Cipher C to B. 
C=E(kpB, S) 

Step2: B decodes C with its own private key ksB, and obtains the 
signature sentence S. 
S=D(ksB, C) 

Furthermore, B carries out restoration conversion of the S with the 
public key kpA of A, and obtains the plaintext M of a basis. 
M=E (kpA, S) 



Supposing M checks that it is a meaningful sentence, it will attest that 
surely M has been sent from A. 

[0082] In addition, the sequence of giving the function in each Step of 
secret communication with a signature may be reversed, respectively. 
That is, by the above-mentioned procedure, it is Stepl:C=E (kpB, D (ksA, 
*». 

Step2:M-E(kpA,D(ksB, 0) 

Although it has become, secret communication with a signature is 
realizable with the following procedures. 
Stepl:C=D(ksA,E(kpB,M)) 
Step2:M=D(ksB,E(kpA, Q) 

(c) A typical public key cryptosystem [0083] Next, the example of a 
typical public key cryptosystem is given to below. As a method which can 
perform secret communication and an authentication communication link - 
RSA cryptograph (R. ) [ L. Rivest, ] [ A.Shamir ] and LAdlcman: "A method 
of obtaining digitalsignatures and public key cryptosytems", Comm. of ACM, 
1978, - R code (M. Rabin: "Digitalized signatures and public-key 
cryptosystems", MIT/LCS/TR -212, Technical Report MIT. 1979), - W code 
(H. ) [ C. Williamg:"A ] modification of the RSA public-key encryption 

procednre" and IEEE Trans fnf . Theory and IT-26. — 6 and 1980 MI 

code (Matsumoto — ) Imai: "the new algorithm of a public-key-encryption 
system", Shingaku Giho, IT 82-84, 1982 :T. Matsumoto and H. Imai:"A class 
of asymmetric cryptosystems based on polynomials over finite rings", 
IEEE International Symp, on Information Theory, 1983, [0084] As a method 
only whose secret communication is possible - MH code (R. ) [ C. Merkle 
and ] M. E. Hellman: "Hiding information and sjgnatures intrapdoor 
knapsacks", IEEE 5 Trnas, Inf. Theory, IT-24, 1978, - GS code (A. ) 
[ Shamir and ] R. E. Zippel; "On the security of the Merkle-Hellman 
cryptographic scheme", IEEE Trans 3 Inf. Theory, IT-26, 1980, - CR code 
(B. ) [ Chor and R. L. Rivest > "A knapsack type public key cryptosystem 
based - arithmetric in ] f initef ield", Proc Crypto 84, - M code (R. ) 
[ J. McElioce:"A ] public-key cryptosystem based on algebraic 
codingtheory"DSN Progress Rep, Jet Propulsion Lab 1978, - E code (T. ) 
[ E. EICamal:"A ] public key cryptosystem and a signature scheme based on 
discretre logarithm", Proc Crypto 84 1984, - T code (on the other hand, 
the public key encryption using Shigeo Tsujii and "matrix decomposition 
is formula", Shingaku Giho, and IT 8512 and 1985), [0085] As a method 
which can perform only an authentication communication link - S code 
(A.) [ Shamir: "A fast ] signature scheme", Report MIT/LCS/TM -107, MIT 
laboratory for computer science Cambridge, Mass, 1978, - L code 0 
[ KLieberherr: "Uniform ] complexity and digital signaturc"Lecture Notes 



in Computer Science 115 AutomataLanguage and Programming, Eighth 
Colloquium Acre, Israel, 1981, - A GMY code (S. Goldwasser. S. Micali and 
A. Yao' "Strong signature schemes", ACM Symp. on Theory of Computing, 
1983), - GMR code (S. ) [ Goldwasser, ] [ S. Micali ] and R. L. Rivest: 
"A"paradoxical"solution tothe signature problem", ACM Symp. on Foundation 
of Computer Science, 1984, - OSS code (H. ) [ Ong, ] [CP. Schnorr ] and 
A Shamir: "An efficient Computing, 1984, and -OS code signature (Okamoto 
— ) scheme based on quadratic equation" and ACM Symp. on Theory of 
Shiroishi: "the digital signature method by the polynomial operation", 
IEICE TRANSACTIONS (D), J86-D, 5, and 1985 :T. Okamoto and A. Shiraisi :"A 
fast signature scheme basedon quadratic inequalities"IEEESymp. on Theory 
of Computing, 1984 

Various methods including **** are proposed. 
[0086] 

[Effect of the Invention] As explained above, according to this 
invention, the charging system and accounting system which solved the 
conventional problem shown in (1) - (3) in a multimedia network etc. 
mentioned above are realizable. By this, while a user uses various 
information cheaply in rental, protection of privacy can be performed, 
and an information provider can receive distribution of a use tariff 
according to the use frequency of provided information, without managing 
information use for every user. Moreover, by introducing a tariff 
portioner and tariff payment person including a dealer, it can include 
to payment of a tariff and a user-friendly accounting system can be 
constituted. 



DESCRIPTION OF DRAWINGS 



[Brief Description of the Drawings] 

[Drawing 1] It is the block diagram showing the gestalt of operation of 
the 1st of this invention. 

[Drawing 2] It is the block diagram showing the gestalt of operation of 
the 2nd of this invention. 

[Drawing 3] It is the block diagram showing the gestalt of operation of 
the 3rd of this invention. 

[Drawing 4] It is the block diagram of the network by the gestalt of the 
3rd operation. 

[Drawing 5] It is the block diagram showing the gestalt of operation of 



the 4th of this invention. 

[Drawing 6] It is the block diagram of the network by the gestalt of the 
4th and the 5th operation. 

[Drawing 7] It is the block diagram showing the gestalt of operation of 
the 5th of this invention. 

[Drawing 8] It is the block diagram showing the gestalt of operation of 
the 6th of this invention. 

[Drawing 9] It is the block diagram of the network by the gestalt of the 
6th operation. 

[Drawing 10] It is a block diagram for explaining the conventional 
superdistribution method. 
[Description of Notations] 
P Information provider 
PPC Money information 

10 User Terminal 

11 Judgment Section 
14 PPC Input Section 

16 Accounting Section 

17 Signal-Processing Section 

20 Tariff Portioner 

21 Communication Link I/F 

22 Network 

23 Tariff Payment Person 
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-16 

-17 



(2) 



ftM¥9-73 3 37 



Lfcif 1 f E«©iS&gllo 

[r#js 3 ] ±t&£&mtfm.&T*3bzm*iz 1 ibr 
[a*3S4 ] ±ibi mmmt i c a- ktssr^i 

1 §3«<*>i$£SfI 0 

&R£**&8ttR6\\7J*ti*A7J#»t, 

[R*Ji6] ±§BW^#Stts ±§3£iS1S«<!:±f31I 
3 J: 5 LfcR9&l 5 E«4>1M»fl3flL 

[R*Jg8] ±E&ttftR(ifBR«tttzeR;!rtifeft 

*-p**n«ja 5 iBeoreiugfiSR. 

[R*H9] ±E&{ftW«®fyftffiR«*0(c>gflr 

«affl#ft£R*.fcR*R 5 iBewitaaiigSo 
ran 1 o ] mmtmmz® mmm^^m 

*«e Lzissmm nvnmzwsiT zwnm**u 
aT*MR#«*»r*RRRR£«ii;tfc»ffl->xx 
a„ 

[R*R11] ±E«5£#»tt» ±E4tt««t±IB 

ff-5<fc3U:LfcR#JS1 OGR®iMh>*?&. 

OMR 1 2 ] ±f3£$i£tt 8tf 3i£-F&3ift*g 1 0 
i3R<DiIfr>7xxA„ 

[R*R1 3] ±BB&aiff«»B3»ffi»[«:i3Sftifc 
DMIT»«M«4I1 0fBR©iI{§->7x7A o 

[R*JS 1 4 ] ±IB*|JS#RSRRlctttt1ff «®f ijffl 
«MB*aMW-*iWi*«*W*n:IIWWI1 OIBtBOiifl 

[mm 1 5 ] ±t 3fijffl« sicts uT±i3it nm% 

£ifttffcR#Jl1 4i3e©ii(i->XxAo 
[R#H 1 6 3 ±1 BflJltilRfcJS CTRRR ROfdR 



8£©£R*^*fi3»^B«*RR*RttfcR# 
R1 4i3tt<7)iifi->XxA. 

[fl*R1 7] ±gB&RRR0il{§&R4iftRlcJ: U 
S-5J:3lcL/-cR»^1 0. 1 4~1 6«>fl*tfM RE 
R0XMh>*?&. 

[RRORRftRflli] 

[000 1] 

[momTz&mm *nmt> mm®?-*. » 

*»TRl*6ft*RR«R» RRRfllttRS 
tfiMS^xAlcRU R(cflM<Ml«i:*ftK«r* 
RR£3fcRT*«b©?**. 
[0002] 

[ft*<Dir<*i] »*k WRi«BU:6«'**7 7"r/«. 

SilflOStfflfb* P-A;HU7*7 h7— y<D9Jkm 
fcfflV 0W«SRRftfiJRLTR4&fllRftaRU 

*1«Rtf-e*RRjWII*LT^*. C©*5*1t-fcr 

xicfi^Ti*» RRLfcRRtcjwiRRtRwctr* 

[0 0 0 3] L»LW&* R*7*tt««©fflHtt*S 
RTRy* 7n?5M#R «R*Rfc) WROTE 

Tl**/\-K*x7«»*Rl\ V7h7i7a<*U:± 

U RRR^tiRRRR^RIUcHUTTRTftU. 

[0 0 0 4] CtUCfctLT, roSHL fcl/>3V7h7 
x7lt*J# OHM. RRRRR) 0*tfiJ©«R«46*L 
fcRStfRR-ftlcj^TRRStU &MBB6 0-77 
2 1 8^, ^g§B86 0-1 9 1 3 2 2^. ftH8B6 4- 
68835^, 1tR*F02-44447^ RHT0 4 
- 6 4 1 2 9R«9ft&RlCR&flfc. 0 1 0 

0 4-641 2 9*tii8fcj***lfc WBlj ©ffi&EI 
?ifc*o 1RRR4& P « §»6M^fi2 Lfc V 7 h 7 1 7 P 

p i (sfc(*pp j) *ftus#R£i ohss. sirr 

R*1 0tty7h7i7PP©fiJfflprS*. V7h7i 

7P Pfcttftnir*ifc@*r7 r -*P i d i ($fct*p i d 
j) fciPJffl#©a— V I DS©*mcj:oTW^gpi 1 
TWRU ffJfflqI«:6«rffi«11ia©fiJfflgS*IB1tSI51 

21CI3SL, ^■©Jss^cs^^,^T«a«««p^* ; ^■©« 

ftimi (V7K7I7PP) OiPiffl»^^*R«-r 5» 

1 3«J«±fl)*SS*^GSSU (V7h7i7-9— fcfX 

[0005] 



i 



(3) 



1SMT9-73337 



( 1 ) rg$GLi itvfflmwg\z$tpi* titcmmmx'tb 
neu rjg3Bij zmmtzixt. 

[0006] ( 2 ) raseij »1Mia)^iEfyn*K± 
5B*«IW-*fc»K» EltSPl 2©<fc3ftf!UlV7l»* 

If Willt^U Tttft < U>$UU6<JftSi^*T£fc«> 

«, *]«##£«><*: 5 fctit «**JfB Lfcfriio ? C £ff 
1tWWttHC»SftTL*t\ WMK>7*-M5>-* 

[0007] ( 3 ) rjgaeij \tm/m<mim&* 

£L<«IW*, T*t>5, *Jftf»**iEL<JBIIt-« 

fUWKttfcttofcatt, «©#«U:*9T*MM>il*a 
[0 0 0 8] *»Wtt±a!©J:3ft5lflMc«*Tft*ti 

tet.oT*y» (D ~ (3) ©fiaffl*»»-r« 

[0009] 

tt®t. ±SBArt#»fr£A7J*tlfc&SS1W«**!J5£ 

[0 0 10] R^SORKKJ^fllttSfiSlllcS^ 

•5 iCfiK* tlfcRRSdSHTS o T» RRCfltrRMR 
ifi#A*>;**l*A*l#f&£, ±IBA73#^6A73*tl 
fcftMMR*«S LT±8BS«1II«<0* IMffirr *tf 

[00 11] R*JI1 OWfSEfcJ^Sfi-VXxLacfc 

#«s*sh£. RRRR*Aar**3tc***u a*j 
*iw«R*ttaT*«R#«**T*RR»R£*R 

[00 1 2] 



mug] *mncj:Atf« sttasst^y^-f k*- 
*WRr«**a»r*©T, e«>iwr«R*R^T«R 

[00 1 3] 

[5KB<DHffli©»®] RT. *»Bte«3Sl®Rtt<D 
RR*R1*#RLTKRr«. RIICSI^T* 1 Ott 
If «5§flS««»: LT<DfiJffl#ffi*. PttflHI8(tttf« P 
Pi ($fc«PP j) tt««il«#PK*-3T^«?S 
(R&ft*RfflML P I D i (*fc(4P I D j ) ttP P 

i KttRSftfcwaRRHRr-** ppcti&arr 

*«fc3lcRR**- WfcRRSftfcRMRRx 1414 
PPCOA738B* 15(485^ 16li±fB&8P14, 

i s acmes 1 1 *strR$s. 1 1 ittmrnm? p 
©RRqjRtnRrsu&s. 1 7tt^^sagST'« 

[0 0 14] atcRmcofTRRT*. «R«##P 
ttP I DSRttfcRKRRPP *OT#SS* 

1 o«. zommmmp pzmmtzmz.it> etm& 

S1 6*Rf&?-*J:3fcRjSLT££ 0 CORRS16 
tt&RfilRT'fc* P P C ©gttO £ LT<DA*>S 1 4 tf 

m&mwpommwxff&czt. sissi 1 
tip i Datf/£fcttPpacg^7\ nfltRRPP 
©MRpr»tt**xy*r*. mzix> p i dic*** 

fc*Jffi*4&tfP P C©£tt«atf*?^SttrtfrSfrft 
^Ofiy^TM. mmtfOK («FrD fr£ (NG) 
frttRWORSl 7l=R«StU <feLOKT*fttf» ft 
#*&3IS1 7ttMR*t^RRPP©«RtfRR£* 
£J:5lcfflgLTU}7rr*. £0)tZ0>P I D^PPPC 
«1MI (JMMOt J«»*^> P P C fl)»Bft 

a) tts^si 5T*S/T»*ti5<, *fc, fjsgpi i©w 

[0 0 15] *ftHlc£l*«£ttffigPPCtt*|g4)& 

^atfl CA-K^>PCMC I A«^f(cttM«tlft:BM 
t«fflifttt?tt«:1t«T»-3Tt.at\ *«WT-tt, !PJ 

■f , *<Dftfc y icf<jffl#ic«c# L«t^ttii« p p c ic 
&oTtm®®pp<ommpj : giimjzrzo &?z. n 

0BffS < s H(S<0&8lt^ffl**f81f ffl PPC*to 
SCOT, S«ST'»US^T'«5o CWCfcoTv ^<CD 

[0 0 16] $fcs *fOTtf*«H#[i*7 r -***fc 



(4) 



1t&8¥9-7 3337 



uimam p <d<#*ijW6*itv*^ <* 3 iz&zz 
*jjb*#£©iihip 1 Dttm^tcfrt^ommmm 

tt#fMit>fcft^tfs <£cD1tfB&MgiS*JE;rftfcfr<!:^ 

<j)$MommT°mm-%<, «±tcj:y, mib (2) ©fy 
[0017] p p c itztztmrnum? 

&2><DT\ P P C Zm^ZZt atttf*4£<D$fttM;:*a 

*M-r*o cnictoT&uiB (3) ofs&wmnz, 

SU. JH*WftPPC0A#;££:l5]iK;& &im£4># 
E^teMIB (2) «)Nfl£ttttT&2~60)Jgtt4)&ffi 
leges' tl5o 

[0 0 1 8] ft. iS£8l31 6tt*£l!ll4)iS£gHT*a5 

itTt»j:t\ *<dj§^ mmimmpfrzimmipp 
icm&tirc®&p 1 D^s^gpi 66W§ftu p 

I PPCtcS^<!pJSa51 1<DTOSjg$tfOKT*£ 

s«it « p p ©sMWWowMRrr 3 t 
80)nm<DBmimm lt*i\ 

[0 0 19] %(C|t20mt«)»8«B2lCO^7Rn 
r*. E2ttPPCtf5ll!g<D&8l GKft) 
S*T. C P P C <DA*>8B 1 4 it 3 f V^HEW© 

apt*»»a #wMH**rc®Aa»i 4tc-jeo*a 
*(c«je«i mnwirapp0!>f!Ui«mrr«. $rc 

tmm®ppwmpi : gz*m?z. *tts mmku 

iCUfeiataH&fcAar^SfcLTfcJriA, A 
^JhftMtta-fvSf^xi 8lcttM«tu mas 
«#P *fclM^^«?3fflSfr©1i«tf El** 

a. cot*. &mim&pp%<n*\m®mt-hoy* 

•y * A 1 8 «ttft#&1MHI<ft* P lc#E**l3o &ft 



(ctt*-7>^ 1 9 

[0 0 2 0] 55ClCB3CDll«5tDfBJI*E13tCOt>TlttW 

r^o emiPPCtfxu^va-Koj^&y'.w 

K*- K?**«&*wLT^*. *JJB#tt P P C<DA 

^^JS^lCliP ProfiJffl^^PjrSo «:®J§£» PPO 

Its 1 <hPPC©A73l 4««§fig*tl5o A7J 

SI 4tf 7y*-r Kft— KfciUlDLTJf AT*S«lJ*£ 

[00 2 1] C«)J:3«7'J^<f 

i»2 0t»y» 1f«S^Ptt*<*)*4£#E#2 0fc 
B»T*C£[cJ:-aTiitt1«iP POfJfflSglci&Ufc 

[0 0 2 2] CQftJSl!gHCJSUfc»&<DttEI*s 
VI I / F 2 1 ftjeL*T8&«>f!IJl1MI*K& 

#E#2 0fcfflStf*C£fcJ:oTSBI;r*i*o Z.0M 

wm\m&&-\ up?*)** k*- K©*««B»rr 

P£iHIfc<l:oTA7jr CODiifl I /F 2 1 

3lCfi*»E*2 0<D«*. ti!a«««Pa)ffi*St;f<J 
ffl#«*1 0tt*-y h9- *2 2KMI&tlTfe*J« » 
2 0 \ i±ieii55»ClS UT^^^tS«««# P (C 

[0 0 2 3] Sfcs aft I /F 2 1 £ftfcfcCM§£«\ 

t^3*56*a5*. JIcDt*^ WSVI IIMMIOSC 

S«««P POWIilBtk*^';^ K7J- KlcEVr« 
&mmt* CVffiJU K*- K*»sfe»E*2 0<? 
IsliR-r5CilcJ:oT> *Jffl«JSlct5i:fc»^<D»E« 

ftt^tt* ^MIHBOWAflDflWcry^-r K*- 
/£L, Ea«T*ftt^JIBi«[C»«;r*»4H:BI«T* 
[ 0 0 2 4 ] m 5 ttSI 4 (DHJS©^®«^r t <DT% P 



(5) 



»H¥9-7 3 337 



p c {cum* nz&MmKmfi**oMo)&mm 

¥4£#iB#2 0 K<fcoT<0**aim«T*$*1t8lE&7 r - 
^T**5 0 5pJffl#WA73SP1 4£PPC££U*t>o II 
£8151 6ttPPCfr6««*St*ttJU *©£S#P I 
Dlc^*tlfc^«fc»J^< (C©£iIttS;n**lTt,J: 

Wd£*l£Bl 1ttPP©fiJffl*fF5I (OK) r«o c 

t*k p p c ornvmsiummm Lzmm rhht** 

[0025] £©«£©&«« attB?W*1t«T*fe5 
©T\ £«Stil$fi©Aa}7Jt>iI<I I /F 2 1 £ftLT**£ 
»E# 2 0 ic J:5ji«tc J: C 

c<Dt$. mu ss 2 ©&&&©?&«£ g 

U „ HB©£«*fiJJ8#ttfi£»E# 2 0 KS«3dt 5 

«H#£S»«B^«Bf^*®tt©BBBB CUB* 
*4£ft?i#2 3) T*fc*„ fiUNIM©BS](cB 
LTts B3©*tt©&B£nttlca« I / F 2 1 *« 
^TB&©*i.|gftB*Aft#l!*2 OlC»Stt*C£lC 
J:oT« fOTBBfclSefc»£©#Btfqrttfcfc*. C 

©t§£, * !Mn**B?n&*Bffi b p p c iz j: ? zm 
m&ttiwm 2 o *mmm pessc* t»piB?* 

So 

C0 0 2 6] jittwictt, *©«k34aflwawcj:-3T 

1 6l*B£©J:3&*9*BEBa¥B«*LT£»A 

r*#fa£*rr*t»©<!:-r£o cn», ppctf7P» 
tf-x-f A*B©B*B*tfB»ft«#?**fca&fcs 
P P C ©a e-SKJ: oT^IEtfirfcft* BBB0BS 

©t\ ^ti^Ks^rs/ctticppc^saEHi^cu * 

<< AT. * > 7©gJIte <fc o T P P C © □ k?-«©*IElC 
Mtt*-**©?**. 

[0027] »c« *ot#*a. mm&z B, ®£ 

#iB#£C, 8ftaB**D£U &4UB«RrBttB 
*B*»Wc«»U iM«#tt*©Bfc*«3?*« 
filMftnoTt^'b© (ft*l£ A©BBB*sA, 
'AfflMZpAtTZ) t LTBSMSSSWrrSo 

t% a# b©b«bbp i *«yft-r«aft«*a.«. fc 

/£U X©BY|cJ:«UBttB* {X} " YTBU fl 

ffl#©£$B8»tf -r >7©ssm:B£S$ 1 
6 ft©S£tta^E**Tfc#s$fctt«-A©re«*>iE» 
tcj:5 i fe©i-r* 0 

[0 0 2 8] [£MBBA¥ftH] 

(1) AliaR GUt©JHttanicR6«^) #©£8 

ig«©A73S*«e»©s«isa i a u 

•?»h«*a *-3J*T»BBsATB4LC(caS 



MA= {A, {A, i A, a, TA} " sA} 
[0 0 2 9] (2) CttMA©S**A©iig|®pA7- 
BBU i A*«l*TDlCaH$M>B*«5l\ *fttf 
»tAft6*Uitf4««la* 1 P3S*/cttS*mttc 
« (BBtf 1 0 0PJ*tt©BBWMUi 1 0 0PJS) K 
C ©S*aT*«5 s C T»»& LT&©* •> A fc 

as*, jweu f-nsicttSfts^-rAA^v^Tc i 

MC = I {TA, {C. e. TCi} "sC} "pA 
[0 0 3 0] (3) AI*MC©#**pATB*U * 
5fcsac»OT*C©aBBpCTB**BBU £ 
SBSItfiELM-tltf {C. a. TCi} "sCSPPC 
iCiBSrSo TA, TCi tt*1'AX*>7** 

r*®WA Bi;BB«frs©Bi;*<ri»x*>7* 

<t)Oy>yb-^tt^IE»*tr*. TA, TCi 

it*; y 7ji/B»*b»-bt* c t a:^*/t(***^ 
as© * -5 *t©-p»fttf * < ax* > rr* < t t <fc 
t\ 

[0031] mmmmmwm 

d) Atfisap itfnifti^«, A©ppcrt© 

*HUM#P I D i lc*Sftfc«B»BJ:*J*Stttitf 

gfi^spi 6«p i ©«ra*fFRrr«. 

(2) AtfP lOHfltBTUfc&fN S^tt«ie>t>(C 
gg*8P1 6ttPPC©*«t«fr6BLfefiJffl»**}|| 

[0 0 3 2] (3) E©£$, Att*©*iJffljl5EQMB^ 

MB= {A, B. {B. b, TB} " s A} 
(4) CttC©***— ?*fcfiUELl^*fcs bR 
*B^©»13*i:LT$a3o 

[0033] ±i2©ittfBT'tt> jas*fsmtc-r*fctt(c 

tcfc^Ts /yb-^M©HlfBttB7BT«U. A, 

BBTwr* jbbobsit^* -r ax^ >y\mt l t 

«B?*U^B*«b**. ±§B©^JS1f«!A#«i 
5fiJffl18Ba«J»a©#Bttlo©«T*»»A ffi^W 
ftttB««BBB& LTWBBBWT-^iffl^ricB 

*saa*^3*»©tt^7*iiWfc^$ti*o 

[0 0 3 4] $fcx 5ifl I /F 2 1 *fcfc&l,>i§a, H 
B«»BBB»£fl!)BB«E« 20©<!:C5T'PPClc 
imt **BflMB*»*t 3 1 * BA(C A73 LTt, 6 5 . 
$fcs B^fiPl 6tfBEMB©J:3*B«BBPP©« 

ffliBS* p p c icibs u p p c zmfim&on&im 
#2 o©^c«tbbbb*b% • wtsmmmti 
mi&itm®w.Tzct{z&?z. mmmmizfcctc 



(6) 
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wmtt&mmttm ut * •? ic8**he« 2 0 m 

6^T*££1t»fcT f -*T'fc*©T\ iiffi I / F 2 1 
£ftfcfcl^Jffl#«P P C*ffll>*fc»lCli&-flE^J£ 
S?©**£#E#2 0£frr5#Etfa5S©T\ *lfflfBS 

[ 0 0 3 5 ] m 7 am 5 <Dnm<DB®zm?*><D?s p 

PC6M Ca-R»PCMC I AOJ^ftfll^tofca- 

6 tlSl-T'^^o COJg^ttx PPCrtlCf&!rt*tlS£ 

x-2 7£ o fc y . lfi5§j£*Sfc**£#E# 2 0 lc J: o 
T<D*linm«lST**«1#»«:T— S»T*»*o *lfli£(iP 
PCWArtSM 41CPPC*3-Ui*. RlrSO#)g!* 
(BgfiES^4>fcfift £) lc J: -o T P P C ttmnmict- 
«. H£gfl1 6ttPPCfr6*»««*Bl*aiU *<0 
gjtfp I Dlcai*ftfc»*J:y*< (*«tt«^*tlT 
«b*l*) s **81 6#PPCte««»#*WOTJIBT 

s««£ic*j&8i ittPPa>jpjffl^ffRir%o coig 

^ PP©?iJffl^^SlcJ:^TS«r*tlTl^T 
*k P P COtBKH&JMtt1IMlT*JJlRrfra>«J: 

[0 0 3 6] C©JfS<D£ai1t?BttE?W&tiHBT*£* 
<DT\ ftflMHROAHifttafll I /F 2 1 *ftLTn& 
2 0 tOM&o&m* K J^ilftfcJ: y -5 C £ 

ceo**, sk S£2©£«i<Dj&!S£syis 

B8<D£8**Jffl#tt»&#e#2 0 

t«B**A/««f^*©flM)MMIH» HPS. 
g#2 3T-££o fJJBlMgQWIIlCBQLT'EK 

m3<DH«!<D»(iiiii«iica« i /f 2 1 *«^T»a 
susftetrenttftiinraic j: o THta*ftE* 2 

0 *1f!?8iH«# P leg* C £: «, ?ffi?ft «. 
[0 0 3 7] mmclt, &®J:3&aflMHHcJ:?T 

^MMKBr *«fttt*#« LT P P C i: LTHt**« 
Ttt**- K«-t*a 'Jr-fimt LTBgHS^tcJ:* 

zmzttfT'ZzwttZo tot*. mure 
tifcy«y««ic»*a*tu *QT9*x*&*mit 

T* (*- K«*?#*»*#E*» LOT****** 

*Sfcl*fl&ftB*2 Otttt£MT**ftl,M±ttKcfcc>T 

[0 0 3 8] *Jffl#0S*1 0. 1t«ffl«#P(D^ U 
£#BH£ 2 0 n£iL%% 2 3 ©SfctiEl 6 <D«fc 



3IC*» h9-^2 27?»»*tlTt'>*. fUffl 
®£**TL (flAtf« A<tC©ft3©l88@£s A. B<b 

w&afcaofMNi s c **a8&ic«& u ^nic^jsr 
*«b©amipc*aiiLT^*feotr*. j-xt 
As«BcDS«iiap i «wsr*«d**?i*. tc 

KLs ¥XXO!>aY»Cj:%llg#X* {X} " YTSU 

t-o p p c rtT*^fcn*t<Dfr 
[0039] [SflMNSA^no] 

(1) AliCltaR CMO*ttlinic||&ft^) 
^SI1f«©A73S**D^©S»©eS1f«J i A 

•w^5>»niftfl *9i*tcic&&. 

MA= {A, {A, i A, a, TA} " s A} 
[0 0 4 0] (2) CttMA4>RKV#*A&ft*LT 

l*«sATmU i A£ffl^TDlCaR#0fl#*ft 

l\ **ltfgttAft6ftfttf£$tt«alcCc7)§:fc@-c? 
s CTV&LT&tt* y-b— ?* Atttt*. 

MC= {TA, {C. a. TC} "sC} "sA 
[0 04 1] (3) AttMC*sAT*tt#U *5tCs 

C KWIST* C OiiUS p C T*S*««g U 

««iEL^ii^©*A<DP p ctia PMo&t&mmtm 

£#£T*o tits T As TCtt«>y7*)U#^fll«S- 

[0 0 4 2] [f<jfflif«ji5a]ia® 

(1) AtMWIP l«flWLfcl^*» A©PPCrt(D 

*ait«jA^p 1 d i ica***ift«fli»**y**w-titf 

H*SP1 6(iP i (DWffl^^-T^o 

(2) AtfP i <D3Wffl€rSSTC7ci*. $fc«fJffl«PlC 
S^SJI 6ttPPC©*aif!a*C5gLfcjpJffl»**S 
L3l$s ^©teS^PPClcStiitf. 

[0 0 4 3] (3) Z<DtZ* Att^OfJffliiffl^ClC 

MB= {A, {B, b. TB} " s A} 
(4) a*C0*y-t-y*it#UEU^$lc, bP3 

[0 0 4 4] AiBCDP^tf^tBg^ifKCcto 

T^ytyr*^ *©iaa*ttSfi©*ttfli«A#« 

at«WnHBI«JMW>IB"WfAtf*l\ fc^U Ctt 
[0 0 4 5] [flNHlUBXH] 

(1) AttCH:Bt©#iS®(0^*«ai-r5/j:«>tC^ 
©^y-b-5;*C(Cji5. 

MA' = {A, B, TA' } 

(2) c»dmcK*£jftu *©yy*-s;«Aic 
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MC = { {TC , A, CK} *sB, TA' , B, 
CK} "sA 

[0 0 4 6] (3) AttMC fcsATOTU {T 
C , A, CK} " s B£BlCj£5o 

(4) Bfigft* sB?H#U £B8CK 
TWHb Lfclf iB£ A £2S*„ 

( 5 ) A ttSfSSC K TnVHMUMkWr *o 

[0 0 4 7] ±iB©iJtlB?«U «VS«-fSmiCf*fc46tC 
Ci:*fiJffl#HcDlig#^tt»iffiSIBg^tL/c!b\ SI 5 

fc. *yiz--J\>i<D&X}mitm*®T'&V. A, BUT* 

'««m* ait LTWffl^awx— >*ffl^-riciii^saa 

[0 0 4 8] iifi I /F 2 1 *J»fcfclNi£» H 

ffl#ttB53SJS& £©*4£#E# 20©<£c:3-pPPCfc 

# maw «fl p p wmmimz p p c kibs u c© p p 

C «IBRjg«®a*#B* 2 0 ©£ C 3?*fMt 18**1 
ft • AfcT*l«lcWffiE«*1l»tf B*r*E£fcJ: 
?T> «JH*Klca(;fcaft©4NE*&3J:3lct'«C 

ttfT-zZo c©*3fc«?«ft£Hitwttma! ufc* 

*©T\ >IfI I /F 2 1 **fc»l*JflHH*P P C*JB 
L^fcttlCtt&?1E^$©8&#E*2 o 
W«&*©T» fJfflfB»tt^-fl2liRT*fiJffl!gJStCi$:i: 

[0 0 4 9] E8liS6©l&ffi©J&8g*,TVr<6»©T\ £ 

5 (ommammtrnmicm^^fm^wmt lx 

m\ S#»E#2 0©l*S*^MHSSG*w**>©T 
*)ffl#4S*1 Os tit$fiil##P©iS*s HSU* 
#2 3©«*ttH9©J:3U:**h7-*2 2TlMlS 
ttTVSo PPCtLT«^*«?*-Ktt-fe 
*iUf< ««&<!: LTm»*lc £ «Bi**mtfP, 7 
*-t>UMWcJ:*x— ^/tyvCT'^'teyUMHP* Bg 

n#tta*BE«HUcjB^«fM©M* 

[0 0 5 0] ?Jffl#£A, fl|8JItt«&B. 

«i#i**©»**«T**aii««noTv*t>© 
■T5o A««B©s«if«p i mat**tt* 



#**o tctzU X©ttYICj:«ftraiiJll* {X} * Y 
-f«U6*t»OP P CrtTlrfctlStCfr^c 

[0051] [^s§if?8A#saa] 

(1) AttaH (j8»©*ffiliR{CRg6Sl^) #©£$ 
1MI©A2)S**aft©BMim i A (MEWHp*U 
v>7 ^oltTffiffi® s ATS* LDlcjM 

MA= {A, {A, i A, a, TA} * s A} 
[0 0 5 2] (2) DttMA©*&«A££HapA? 
MU i A IE L < A # a RSft RlBtT-fcfttf * £8 
ttffl a * D LT*©/ * A lc&3o 

MD= {TA, {D, a, TD} " s D} * sA 
[0 0 5 3] (3) A(iMD«pA?8SU ?6lCs 
Dfc»j&-r*D©iiB&«pDTB*£8fiU ££££ 
* IE LlMM©* A © P P C 1* a R#©&M1«B* AaH 
**„ ±E. TA^PTDtt^La^VTW^ 
aS^1^6©I^C^'rA7.*>^'bO^-y-b-v>(i^ 
TA, TDtt^'JT^US^JMS 
HW*Cttf4l\ $fd*'J>&^SLS©<fc-5&t>©T 

[0 0 5 4] [fiJfflttSBiI5Sfl8UI] 

(1) AjWWBP i *«»Lfc^t#» A©PPCrt© 
&mm? I D i lCiB*tifc!W»»*J:y**ttfttf 
H£#«ttP l©*W*IW*. 

(2) AtfP i©*Jfl§*#S7L.fc£*. SfcttfJfll'Pfc 
■6*1 6»PPC©*«fll«^6BUfciPJffl»**S| 
L3lts f-©«SS*PPClc»$atj 0 

[0 0 5 5] (3) C©t*» Att:*©fiJfflafflMB* 
Blz&Z, tct£U «L3lt*fc«JWMMfb£r*. 
MB= {A, B, {B, b. TB} * s A} 

(4) Btt»&*WEUEU*£*lc» A©S£ {B, 
b. TB} "sACDICftU b©»£*gltlX*o 

[0 0 5 6] *tC N AtB©S©1tat»Bi^iifHC<fco 

t^p y i y E»*i#©iiiia7^Ba@tc j:^ 

C©«^, SfJffi#t1f«S«#©Pai::fi*iiSiii^# 
»WW*tiT^*i:r». ft«U TIB© (1) , 
(2) lcSt^TA&BWBTft?T^Ab\ 

[0 0 5 7] immam 

(1) AtiBt©«jiSCK%B©iiia@pBT'lli^b 

MA' = {A. B, CK, TA' } * pB 

( 2 ) B (iSfty y H-V* s B T«#r *. 

(3) Bii^MCKTftaaiWftL^iifRCAtcas 

(4) A»K»cK?M«nnfl:iMi*(K9t-«. 

[0 0 5 8] ±!B©8WB?1*. BW*niW=r*te»(= 

d p i©p»*si*fiii«w 
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siMg^t^^o ? etc ±§E<z>&8Sim\#«yis «i 
fflit«ii5Ea«iS0#iiittio©eijT**yv 

[0059] ^wfftwuffirom^iJiw-rSo 

m 2 «>Jtli«)Jgttlcjg%r §tBg0£$£JB^fciB££5!WC 

wmm p sfci*K£#E* 2 o » mm u 

y-A-feV*- E»fi6tf)J:dU:£«DAtf£ 

[0 0 6 0] $fcs S30HSS^8HJ:^-r^ l >"<'r K 
- R o m-P/ f y □ viUlSSfc J: oTffi < 18#«« pp« 
E#2 0£ftoT7 > y^-<K*J-K£SH*-Jlfi55U *J 

[0061] m4<Dmm<DmmiziTit ynvv-T-tz 
3PPc<*)fca&<Dft»fcA7j8Pi 4*&mti£? mm 

T^*tr») * £6lc£«tll«cDffl{ilcJ:5-¥>y<!:y 
[0 0 6 2] fS5(D$m<DBWHZ7r,tl CA-K^>PC 

Ts ±iem4©i&ffi(BHm£ffl^fciS£vxxA£j:y 

mzmtm*jjiuz*oTs 8&#E#2oa)^6fc 
t\ w6fjffl#tm«a««pt]B t »*iw#2 3*a 

»LTtaHRTttT»*Ci:ttW6tl»T**. *6tC, 
[0 0 6 3] |!8Qjfeft4>&ft 

a& itmMt*#* < ©ia«*ii&*@T*ii§^fc lt 

CD-R0Mg(C&«>, j&*£LT<Z>CD-ROMgtt 
IttESIlStilUTMWciBJBU «ffl#6^©«SBlElS 



Tl^. L»U C<D^StTWCD-ROM*l6^-T* 
K5BlS««l»i:LT©IISJ»"Jtttt»6tiTti, SfrfHIMS 

[0 0 6 4] -tCTs *5IWT^LfcPPCH:J:S^ 

♦J left LTMt** d tic J: o T±E©BW«*»?S 

IPt5» Mffl*ttlS5gJ£T-a)CD-ROMWAd:^ 
ic, yu^-r K*-K9<DPPC<,WAU IMHItt* 

torn te*?Tiw«*»*£*jc7y 

U F*-KT*<D5£ft£Ji£T*;:<!:lcJ:oT\ flHStt 

ft^^iaiR-rso cn(cj:oT. ««©*ijji8£©3Wi 

fc»LT«»IB*ie*lMr*®T» DEJUSIiflMffilJllc 

»r*«itt.»*ct#?**. ussm 6 
(* p p c®&tmHR«fla u «a©?ijsfl«Rijig?»ti 
ur v iwiicwr *WM*a*r* p p c * s 

»^3l<«fc3»cfl|fi8-r5o *Slc. C<7)PPaifcffl 
L*^t$lCtt»^T*5<!:-r5o CtotZ, PPCtt 
1f«««*SlCS^*n, IS55KS£iIUTCD-ROM 
tEfclclfisSirtt*,, «oT» COMlOIMTttM 
#E#2 0li#g£ L»t\ 
[0 0 6 5] S3©HSfi©)KJI(C*J^TfJffl1B« 

0>*iJ«1W8ji«M*b«felcr*CttfT**. fc/c 

u yy^ Fti— nctt^y^-r K*- room* 
^ i pt*tnc»«;L*fc»wis pttfaa*tiT^« 

[0066] mffliiraiiatts] 

(1 ) A <0P PCfc<7>£8ti!$Btf P I D i iCft&hfcH 

«»*j:y**»*itf c h e c K(iif«p i wm*m 

(2) AtfP l0«JB«*7Ufc£** $fctt*Jffl*lc 
CHECK t*PP COMmi»6ILftfiJ)lMtf 

^-CDSSS* P P C (c«$5i€?o 
[0 0 6 7] (3) CHECKtt:*(DfiJffl)i 

MB= {i P, {B, b, i P. TB} * s P} 
(4) CttMB£SSLfc*Bffi8s PT'ffl^U 3<D/ 
* «-$WE L^<k $lc b B^E*«t LTSMx 
do CtilcJ:?T« i P<ts P*531*t.OJJ(^ fjfflffl 

[0 0 6 8] *»c, MaW»££&tf&Nm4££ 

i^-©e^8i*iteffi(c»wr*Bg^^^ («sffia^#^ 
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zo>®£. &a*a*4>»B 

[0069] 7. K- U - ABg*lfctt£g£Jll,^ If 
Pg^ 1 EISU<D«l^T<0@*ffl^*/^-^AIlS^| 

^SiiJ ffi?1f«Jjlfi^ 1 98 6. ©Sg2a»tf|g 

^^4iffl*tlTl^D E S (Data Encrypt 
ion Standard) ^FELA (Fast d 
ata Encipherment ALgorith 

m) t^otc®% rnmimx. &mm nt*twm* 
♦a'j^-fj eas^ 1990. o>m2$&m mm 

[0 0 7 0] fztcL. DES-^FELAttT'/UJrUXA 

% mx\s. '&&o>wmL®mmLtcv (c. h. 

Mayer and S. M. Matyas : "CRY 
PTOGRAPHY-A New Dimension 
in Computer Data Securit 
y", Wi ley— Interscicnce, App 
cndix D, pp. 679-7 1 2, 1 982# 
80 , m*®mz$LZZ (Oi*. Stl : 

MKC" . ISEC93-29, pp. 6 

5-75. 1 9 9 3. #RD &£©S»!tNlS*ft7V 
*) . 

[0071] [4inam#*«] anang^attra^ 
ata^atfsay. n«a«2H, msmzmmz® 

*r*B#*aCT**. JjCFii6§asi#fc-^? (a) 
TW*. (b)77Ph3)k (c) T*tfS0<J> (d) 
?JI{*«fc55t£: LT R S ABg^fcO^T^ft-Ftlj^ 

[0 0 7 2] (a) £mm9BS}<D&& 

(1) Bg#a£«#a£tfli&yii#a*£glT*$**: 
#>. B|^®£«5ffifcEi3rf aEBtfSlg 

(2) SfOT#<Dll^attiil?3*ftTV*«)T\ *Jffl# 

(3) &6ftT$fc&fl£0^#6M&to-m^£;ft 
tff©IiSM?A;f ftTVfct* £ <!: fcSfl^iNSS 

[0 0 7 3] (b) iinam#©7nhzi^ 
jif§£MlC»LT\ iiglCOBI^aKp^ffl^fclig^tji 
ft£E (kp, M) tU *Bffi0*g^aks*ffll>fdt 
#JSft£D (ks. M) tTZt, iMUm&THl 1 ) 



[0 0 7 4] (1) kpftS-ZZtltct*. E (kp. 
M) ©tmiiS^T-fc*. ksA^etlfct*. D 
(ks, M) (DttSttSlT^o 

(2) *u ks^aie^i^e, kptEnnnzm 

i: C = E (kp, M) tfloTVTtK Mfc^T* 

mz, ±13 (1) » (2) KftDilT* (3) <D&# 

[00 7 5] (3) £T<DjI{§£ (¥&) MfcttU E 
(kp, M) tf3£a?$s D (ks, E (kp, M) ) 
= M&mtLtZo 0$»A kptiiig|**lTt^/c46it 

fctfE (kp, M) *tm-r*;:<!:tfT**SJb\ D (k 
s, E (kp, M) ) fctmLTMfcif 3 
Ottia©aks£ftoTl^*AfcW£So ± 
E(1), (2) fctt*T» 3JW> (4) Qftfttfft&r 

%z.t \z j: y sggE&fitf nsrr$*. 

[0 0 7 6] (4) -r^TOJjifiX W£) MlCflU 
D (ks, M) E (kp, D (ks, 

M) ) = MiMtir*„ OS'A D (ks, M) £tm 
T*$*<D(i$ffi@ks*|#oTV3*A<&*T£y> <6 
<DA6Wffiffi8lks' fcffll^TD (ks' . M) £ft 
RU ks £ Jf ^Tl^*Afcfc y LTt», 
E (kp, D (ks' , M) ) *M*<&T'§«#«Stt 

ks D (ks, M) tftttf^Trtl-c-fcE (kp, D (k 

s, m) ' ) *M<>:ft»A gmmte&iit^tcmm** 

[0 0 7 7] liBiailg^T*«> iiB§a*fl3l^5i&3IE* 
Vgmt. affiS*fflt>5SQSD«^tPf/uT*t^o se 

*©&gfl#tf ng^t^ .5 c t izitz. 
[0 0 7 8] WTl=4iHaie#tJ:ya6ffl«A*6Sffl 

o^p huiu^fo A©»ffia* k s a. ana* k 

pAiU B^ffig^ksB, 'AfZmitk pB tt 
5. 

[0079] %&]§<§] A 6^6 B 'NOilft^ (¥*) 

S t e p 1 : A«B<DiiSiak p BTMSBi^bU Bf 

^&C£BU:&£„ 

C = E (kpB, M) 

S t e p 2 : BttSttOffifcak s BTC*«*U t> 
H = D (ksB, C) 

b o>zmmit*®iz$mz'£mitiz^z<DT\ 

A iCffiS-r^TWAfi^B lC$gffiJi^iT*$ *o 
[0 0 8 0] [ISIBifi] A#SB'\<&iI<i£ W3t) 

S t e p 1 : AtegttWffiffiak s AT-JM«XS*afefi8 
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S = D (ksA, M) 

tl^o S t ep2 : BttA<3£l?8®kpA?S*«7E 
M=E (kpA, S) 

6^6ScAA^5jMenT*fcC:t*iglE-r5c &ft#A 
■f^TWA^AOSi&^SBET**^ C<Z)J:5ftf2iiE 
[008 1] [g£tt©ffiilfl] AfrSB'MDfflfl*: 
S t e p 1 : Attg»08(ffi8lk s AT'MfcSfcU 3 
S = D (kpA, M) 

J6tCAttBOiiH@kpBTS5fig^kU Bg#£C 
C = E (kpB, S) 

S t e p 2 : Blig#(D®ffiak s B?C«WU 3 
S = D (ksB, C) 

M=E (kpA, S) 

M6^t6HCA6^SetiT*/cili:*ffiIiE-r*o 
[0 0 8 2] SfittfcBffiilflOSS t e pfctCfc 

S tepl : C = E (kpB, D (ksA, M) ) 
S t ep2 : M-E (kpA, D (k s B, C) ) 

Stepl :C = D (ksA, E (kpB, M) ) 
St ep2 : M = D (ksB, E (kpA, C) ) 

(c) immft'Ammm^tt 

•RSA&g^- (R. L. Ri vest, A. Shami 
r and I. Adlcman: "A method 
of obtaining digitalsign 
atures and public key cry 
ptosy terns" , Comm. of ACM, 19 
78) , 

. RBg^ (M. Rabin: "Digital i z e d 
signatures and public-ke 
y cryptosystems", Ml T/LCS/ 
TR-21 2, Techn i ca I Report M 
IT. 1 979), 



• WPg^ (H, C. Wi I I i amg : "A modi 
fication of the RSA publi 
c-key encryption procednr 
e" , IEEE Trans f nf. Theory, 

I T-26. 6, 1 980) v 

• M I $m Oft* : *4MP»SW*rLl/>7;U 

, m&m. ITS 2-8 4, 1 982: 
T. Matsumoto and H. I ma i : "A 
class of asy mm etric cryp 
tosystems based on polyno 
mials over finite rings", 
IEEE International Symp, o 
n Information Theory, 198 
3) , 

[0 0 8 4] U®mmO)frft?ZZ>tttLT 

• MHP§^ (R. C. Me r k I e and M. E. 
Hel Iman : "Hiding informati 
on and signatures intrapd 
oor knapsacks", IEEE Trna 
s, Inf. Theory, I T-24, 5, 1 97 
8) , 

• GS&§-§- (A. Shamir and R. E. Zi 
ppe I ; "On the security of 
the Me r k I e-H e I I ma n crypto 
graphic scheme", IEEE Tran 
s Inf. Theory, I T-26, 3, 1 98 
0) % 

•CRBg^-(B. Chor and R. L. Rive 
s t : "A knapsack type publi 
c key cryptosystem based 
on arithmetric in finite 
field", Proc Crypto 84), 

• MB§^ (R. J . M c E I i o c e : "A p u b I 
ic-key cryptosystem based 

on algebraic codingtheor 
y" DSN Progress Rep, Jet Pr 
opulsion Lab 1 978) > 

• EPg# (T. E. E I Cama I : "A publi 
c key cryptosystem and a 
signature scheme based on 

discretre logarithm", Pro 
c Crypto 84, 1 984), 

<D-£5T . I T8 5 1 2, 1 9 8 5), 

[0 0 8 5] W®Mm<DfrT*Z%tt£LZ 

• SBg^- (A. Sh am i r : "A fast s i g 
nature scheme", Report MIT 
/LCS/TM-1 07, MIT laborator 
y for computer science Ca 
mb r i dge. Mass, 1 978). 
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• LBg^ (K. L i e b e r h e r r : "Uni for 
m complexity and digital 
signature" Lecture Notes i 
n Computer Science 115 Au 
t oma t a L a n g u a g e and Progra 
mm i ng, Eighth Colloquium A 
ere, Israel, 1981K 

•GMYBg^ (S. Goldwasser. S. Mi c 
ali and A. Yao : "Strong sig 
nature schemes", ACM Symp. 
on Theory of Computing, 19 
83) % 

•GMRBg^t (S. Goldwasser, S. Mic 
ali and R. L. Ri vest : "A" par 
adoxical "solution tothe s 
i gnature problem", ACM Sym 
p. on Foundation of Comput 
er Science, 198 4) v 

• OSSPg^ (H. Ong, C. P. Schnorr 
and A Shamir: "An efficien 
t signature scheme based 
on quadratic equation", AC 
M Symp. on Theory of Compu 
ting, 1 984) > 

•osug^ m*s as: "zmssmiz**?*?* 

)\sm%l5%" , m^ffi (D) , J8 6-D, 5, 1 98 
5 :T. Okamoto and A. Shirais 
i:"A fast signature schem 
e basedon quadratic inequ 
a I i t i es" IEEE Symp. on Thco 
ry of Computing, 1 984) 
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